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, It has recently been shown that quantum computers can efficiently solve the Heisenberg 

hidden subgroup problem, a problem whose classical query complexity is exponential. 
This quantum algorithm was discovered within the framework of using pretty good mea- 
' surements for obtaining optimal measurements in the hidden subgroup problem. Here 

^ , we show how to solve the Heisenberg hidden subgroup problem using arguments based 

t***'" i instead on the symmetry of certain hidden subgroup states. The symmetry we consider 

C ~ ~) • leads naturally to a unitary transform known as the Clebsch-Gordan transform over the 

H ' Heisenberg group. This gives a new representation theoretic explanation for the pretty 

s ! , good measurement derived algorithm for efficiently solving the Heisenberg hidden sub- 

H , group problem and provides evidence that Clebsch-Gordan transforms over finite groups 

' are a new primitive in quantum algorithm design. 
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1 Introduction 

In 1994 Peter Shor discovered that a quantum computer could efficiently factor integers HQ, 



, a problem which is widely suspected to be intractable on a classical computer [2 . Since 

this discovery an intrepid group of researchers have been attempting to discover quantum 

, algorithms which lie beyond Shor's factoring algorithm with mixed success. On the one hand, 

a great deal of success has been had in achieving polynomial speedups over classical algorithms 
within the framework of Grover's quantum search algorithm[3]. On the other hand, quantum 
algorithms which, like Shor's algorithm, perform exponentially faster than the best classical 
algorithms have been harder to come by. To be sure, notable successes have been achieved, 
including Hallgren's efficient quantum algorithm for solving Pell's equation[4] and exponential 
speedups in certain quantum random walks [5], but so far there have been no new efficient 
quantum algorithms which move quantum computing's killer application beyond factoring 
integers and the resulting breaking of multiple public key cryptosystems. 

Among the most tempting problems which might be exponentially sped up on a quan- 
tum computer is the graph isomorphism problem. The reasons for this are two-fold. First, 
graph isomorphism belongs to a complexity class very much like that which contains inte- 
ger factoring. In particular, the decision version of factoring is known to be in the com- 



1 



2 How a Clebsch-Gordan Transform Helps to Solve 



plexity NP n coNP while graph isomorphism is known to be in the similar complexity class 
NPtlcoAM. Algorithms in these complexity classes are unlikely to be iVP-complete. Further, 
both integer factoring and graph isomorphism are not known to have classical polynomial time 
algorithms despite considerable effort to hnd such algorithms. Thus graph isomorphism is, 
like integer factoring, of Goldilocks-like classical complexity, not too hard such that efficiently 
solving it would revolutionize our notion of tractable, but not so easy as to have already fallen 
into P (or BP P.) The second reason for attempting to find efficient quantum algorithms for 
the graph isomorphism problem is that this problem can be solved if there was an efficient 
quantum algorithm for the non-Abelian version of the problem which lies at the heart of Shor's 
algorithm, the hidden subgroup problem [SJ [7]- Thus motivated, a great deal of effort has been 
expended in the last few years attempting to solve the non-Abelian hidden subgroup problem 
efficiently on a quantum computer. Towards this end, a series of efficient quantum algorithms 
for certain non-Abelian hidden subgroups have been developed [51 QJjl HU HU EH HU fT5] ■ 
At the same time a series of negative results towards the standard approach to solving the 
hidden subgroup problem on a quantum computer have also appeared [51 1^1 [TBI [T71 [T51 [T51 . 
Viewed pessimistically, these results cast doubt on whether quantum computers can be used 
to efficiently solve non-Abelian hidden subgroup problems. An alternative optimistic view is 
also possible. In this view what these results show is that any efficient quantum algorithm for 
the non-Abelian hidden subgroup problem (in what is known as the standard method) must 
have a particular form. Specifically such algorithms must perform quantum circuits across 
many separate quantum queries to a hidden subgroup oracle. If we are to view these results 
in a positive manner, then this tells us that what is needed, if we are going to efficiently solve 
non-Abelian hidden subgroup problems, are new quantum transforms which can act across 
many such queries. 

In this paper we provide some evidence in favor of this optimistic view. Recently, Ba- 
con, Childs, and van Dam|14| have shown that quantum computers can efficiently solve the 
hidden subgroup problem for certain semidirect product groups. One such group which 
admits an efficient quantum algorithm is the Heisenberg group, x Z p . The algorithm 
of Bacon, Childs, and van DampT] was discovered using the framework of pretty good 
measurements (21J [TH [22l IXSJ HI]. This yields a particular algorithm for solving the Heisen- 
berg hidden subgroup problem which is optimal and which is related to the solution of certain 
algebraic equations. Here we show that the structure of this quantum algorithm can be de- 
rived almost solely from symmetry arguments. These symmetry arguments give rise to a 
transform, the Clebsch-Gordan transform over the Heisenberg group, which can be used to 
help efficiently solve the Heisenberg hidden subgroup problem. Previously a Clebsch-Gordan 
transform was used by Kuperberg to find a subexponential algorithm for the dihedral hidden 
subgroup problem [23]. Clebsch-Gordan transforms over the unitary group [5S1 [55] and a 
certain form of measurement were demonstrated to not help in solving a hidden subgroup 
problem by Childs, Harrow, and Wocianp?7]. Further Moore, Russell, and Sniady have re- 
cently shown that a certain form of Clebsch-Gordan transform used to perform a quantum 
algorithm which mimics Kuperberg's algorithm cannot be used to obtain even a subexponen- 
tial time algorithm for the hidden subgroup problem relevant to graph isomorphism [2SJ. Here 
we show that these negative results can be overcome, at least for the Heisenberg group, by 
performing a Clebsch-Gordan transform over the relevant hnite group instead of over the uni- 
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tary group, and further, and in direct contrast to the work of Moore, Russell, and Sniady 28J, 
by working with a particular register, known as the multiplicity space register, which is output 
from a Clebsch-Gordan transform. This is the first time a Clebsch-Gordan transform and its 
multiplicity register has been identified as a key component in producing a polynomial time 
algorithm for a hidden subgroup problem. 

Our motivation for using a Clebsch-Gordan transform in the hidden subgroup problem 
arises from considering a slight variant of the standard hidden subgroup problem. The setup 
for this variant is identical to the hidden subgroup problem, but now the task is not to identify 
the hidden subgroup but to return which set of conjugate subgroups the hidden subgroup 
belongs. It is this latter problem, which we call the hidden subgroup conjugacy problem, 
which endows our system with extra symmetries which allow us to exploit a Clebsch-Gordan 
transform. An essential step in our use of the Clebsch-Gordan transform is a demonstration 
that the hidden subgroup problem and the hidden subgroup conjugacy problem are quantum 
polynomial time equivalent for the Heisenberg group. 

The outline of our paper is as follows. In Section [2] we introduce the hidden subgroup 
problem and discuss relevant prior work on quantum algorithms for this problem. In Section[3] 
we introduce a variant of the hidden subgroup problem which we call the hidden subgroup 
conjugacy problem. In Section [4] we review arguments for why the symmetry of hidden 
subgroup states leads one (in the standard approach to the hidden subgroup problem) to 
perform a quantum Fourier transform over the relevant group. In Section [5] we present our 
first new results in showing that for the hidden subgroup conjugacy problem, symmetry 
arguments lead one to perform (in addition to the quantum Fourier transform) a transform 
known as the Clebsch-Gordan transform over the relevant group. In Section [6] we introduce 
the Heisenberg group and show how solving the hidden subgroup conjugacy problem for this 
group leads to an algorithm for the hidden subgroup problem for this group. In Section [7] we 
discuss the Clebsch-Gordan transform over the Heisenberg group and show how to efficiently 
implement this transform with a quantum circuit. Finally in Section [5] we put this Clebsch- 
Gordan transform to use on the Heisenberg hidden subgroup conjugacy problem and show 
how this allows one to efficiently solve the Heisenberg hidden subgroup problem. 

2 The Hidden Subgroup Problem 

Here we define the hidden subgroup problem and give a brief history of attempts to solve this 
problem efficiently on a quantum computer. 

The hidden subgroup problem (HSP) is as follows. Suppose we are given a known group 
Q and a function / from this group to a set S, f : Q — > S. This function is promised to 
be constant and distinct on left cosets of a subgroup TL, i.e. f(gi) = /G72) iff 9i an d 32 
are members of the same left coset gTC. We do not know the subgroup H. The goal of the 
HSP is to identify the hidden subgroup TL by querying the function /. An algorithm for 
the HSP is said to be efficient if the subgroup can be identified with an algorithm which 
runs polynomially in the logarithm of the size of the group, O (poly log |£|). We will assume, 
throughout this paper that the group Q is finite and its elements, along with elements of S, 
have an efficient representation (0(polylog|(?|)) in terms of bitstrings. 

In the quantum version of the HSP we are given access to an oracle which queries the 
function, Uf. This oracle is assumed to have been constructed using classical reversible gates 
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in such a way that applying it to \g) £g> |0) results in \g) £g) \ f{g)). In the standard query model 
of the HSP, one inputs a superposition over all group elements into the first register of the 
quantum oracle and |0) into the second register of oracle. This produces the state 

U f -}= \9) ® 10) = -L E lf> ® I/(S)>- (!) 

V 1*1 gee V\S\ ge g 

Suppose we now disregard (measure, throw away) the second register. Due to the promise on 
/, the state of the first register is then a mixed state whose exact form depends on the hidden 
subgroup 7i, 

PH = w £ \gn){gn\, (2) 

g— cosct representative 

where we have defined the left coset states 

V\ n \ hen 

We will call pu the hidden subgroup state. In this paper we will restrict ourselves to algorithms 
which use the above standard procedure (with one slight variation of not querying over the 
entire group but only querying over a subgroup of the group.) 

The HSP, when the group is Abelian, can be solved efficiently on a quantum computer[TJ 
[29l [6] . The vast majority of early efficient quantum algorithms which demonstrated speedups 
over classical algorithms, including Simon's algorithm [30] . the Deutsch-Jozsa algorithm |31|. 
the non-recursive Bernstein- Vazirani algorithm [32] . and Shor's algorithmpQ can all be recast 
as Abelian HSPs. Given the central nature of this problem to these algorithms, a natural 
generalization was to consider the hidden subgroup problem for non- Abelian groups. It was 
quickly noted that if one could efficiently solve the HSP for the symmetric group (or for the 
wreath product group, S n I S2) then one would immediately have an efficient algorithm for 
the graph isomorphism problem [6l [33l [34]. There is no known efficient algorithm for the 
graph isomorphism problem despite a considerable amount of effort to solve this problem 
classically 35 . Adding considerably to the interest in the non- Abelian HSP was the discovery 
by Regev 16J that a quantum polynomial time algorithm for the dihedral hidden subgroup 
problem could be used to solve certain unique shortest vector in a lattice problems. Solving 
either of these two problems would represent a significant breakthrough in quantum algorithms 
and thus a great deal of research has been aimed at understanding the non- Abelian HSP. 

Work on the non-Abelian HSP can be roughly divided into two categories: progress in 
finding efficient new quantum algorithms for the problem and attempts to elucidate the reason 
that the standard approach fails to efficiently solve the HSP. For the former, a small, but sig- 
nificant amount of success has been achieved with a general trend of finding algorithms which 
are, loosely, more and more non-Abelian. The latter has recently culminated in showing that 
for HSP relevant to the graph isomorphism problem will require a new class of measurements 
of measurement across multiple hidden subgroup states if an efficient quantum algorithm is 
possible. Here we review the progress in both of these categories. 

An early positive result for the non-Abelian hidden subgroup problem was the discovery 
that the problem had an efficient quantum algorithm when the hidden subgroups are normal 
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and there exists an efficient quantum algorithm for the quantum Fourier transform over the 
relevant group [9]. Further it was shown that there is an efficient quantum algorithm for the 
HSP when the groups are "almost Abelian" [8] or, a bit more generally, when the group is "near 
Hamiltonian" :13 (these conditions mean roughly that the intersection of the normalizers of 
all the subgroups of the group is large.) Groups with small commutator subgroup[10] along 
with solvable groups of bounded exponent and of bounded derived series [IT] also admit HSPs 
which can be efficiently solved on a quantum computer. Further, a series of efficient quantum 
algorithms for the non-Abelian HSP over semidirect product groups have been discovered. 
Among these are certain groups of the form Z™ fc x Z2 for a fixed power of a prime p fc |llj. 
q-hedral groups with sufficiently large and certain metacyclic groups as well as groups of 

the form Z£ x Z p for fixed r [TJ] . This last work includes an efficient quantum algorithm for the 
Heisenbcrg HSP (r = 2) which is the main subject of this paper. Further, some non-Abelian 
groups can be solved using a classical reduction and only the Abelian version of the HSP|14j. 
including the groups ZJ? I Z? |36j and particular semidirect products of the form Z p fc x Z p 
with p an odd prime [57], Subexponential, but not polynomial, time quantum algorithms for 
the dihedral group were discovered by Kuperberg[23j and subsequently improved to use only 
polynomial space by Regev[24]. Finally, a subexponential time quantum algorithm for hidden 
subgroup problems over direct product groups was recently discovered by Alagic, Moore, and 
Russell[§8] 

In addition to the explicit efficient quantum algorithms for the non-Abelian HSP given 
above, a great deal of work has also been performed examining the query complexity of 
the problem and the related questions of what is needed in order to information theoretically 
reconstruct the hidden subgroup. A positive result along these lines was the result of Ettinger, 
Hoyer, and Knill who showed that the query complexity of the HSP is polynomial 39 . Thus 
it is known that if one is given a polynomial number of copies of the HSP state pn then 
there exists a quantum measurement which can correctly identify TL with high probability. 
However, no efficient quantum algorithm implementing this measurement is known to exist, 
except for the cases of the efficient quantum algorithms for the HSP described above. 

Given that the query complexity of the HSP is polynomial, it is natural to ask how tight 
this query complexity is. In particular it is natural to ask how many copies of the hidden sub- 
group state must be supplied in order for there to exist a measurement on these copies which 
we can efficiently perform and which provides enough information to reconstruct the hidden 
subgroup. In such cases we say that the hidden subgroup can be information theoretically 
reconstructed. Note, however that being information theoretically reconstructible does not 
mean that there is an efficient algorithm for the problem because the classical post processing 
required to reconstruct the hidden subgroup may not be tractable. What is known about 
the number of copies needed to information theoretically construct the hidden subgroup? On 
the one hand it is known that for certain groups, in particular for the dihedral [40] . affine[T2"]. 
and Heisenberg groups [Uj, measurements on a single register of the hidden subgroup state 
is sufficient for information theoretic reconstruction of the hidden subgroup, and these quan- 
tum measurements can be efficiently enacted. However, it was shown by Moore, Russell and 
Schulman|17j that for the particular case of the symmetric group HSP, measurements on a 
single register of the hidden subgroup state reveal only an exponentially small amount of 
information about the identity of the hidden subgroup. In particular this means that if one 
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makes measurements which act only on a single hidden subgroup problem state at a time, 
one cannot efficiently solve the HSP. This was subsequently extended to two registers of the 
hidden subgroup state by Moore and Russell [18], and then, in the culmination of this line of 
inquiry, Hallgren et al. 20 showed that this extends all the way up to the upper bound of 
Ettinger, Hoyer, and Knill. In other words, for the hidden subgroup problem relevant to the 
graph isomorphism problem, if one attempts to efficiently solve this problem on a quantum 
computer one is required to perform a measurement on O(log|0|) registers containing the 
hidden subgroup state in order to solve the problem. In particular if this measurement can 
be implemented, even adaptively, on less than k registers, then this measurement will not be 
able to solve the HSP. 

The results of Hallgren et al. imply that in order to solve the HSP, one must perform 
measurements on multiple copies of the hidden subgroup state in order to efficiently solve 
the non-Abelian hidden subgroup problem. One important consequence of this is that the 
standard method combined with performing a quantum Fourier transform on the hidden 
subgroup state, a paradigm which works for many of the efficient quantum algorithms for 
the hidden subgroup problem, cannot be used to find an efficient quantum algorithm for 
the non-Abelian hidden subgroup problem. In particular the above discussion makes it clear 
that if there is hope for an efficient quantum algorithm for the non-Abelian hidden subgroup 
problem in the standard paradigm, then measurements across multiple copies of the hidden 
subgroup state must be used. So far only a small number of quantum algorithms have used 
such measurements. The first such algorithm for HSPs was in Kuperberg's subexponential 
time algorithm for the dihedral hidden subgroup problem 23J. Recently Bacon, Childs, and 
van Dam.l4j showed that for the Heisenberg group a measurement across two hidden subgroup 
states could be used to efficiently solve this HSP (and a measurement across r hidden subgroup 
states could be used to solve the hidden subgroup problem over 1 r v x Z p .) This result gives the 
first indication that while the results of Hallgren et al. put a damper on traditional attempts 
to solve the HSP using only the standard approach and the quantum Fourier transform, all is 
not lost, and if there is any hope for efficient quantum algorithm for the full non-Abelian HSP, 
techniques for efficient quantum measurements across multiple copies of the hidden subgroup 
state must be developed. 

The efficient algorithm for the Heisenberg hidden subgroup problem was discovered by 
identifying an optimal measurement for the hidden subgroup problem. In the optimal mea- 
surement approach to the hidden subgroup problem, one assumes that one has been given 
k copies of the hidden subgroup state pu with an a priori probability pu ■ One then wishes 
to find the generalized measurement (which we hereafter refer to only as a measurement) on 
these k copies which maximizes the probability of successfully identifying the hidden sub- 
group H, averaged over the a priori probabilities pu- Cast in this form, the hidden subgroup 
problem becomes a problem of optimal state discrimination. A set of necessary and sufficient 
conditions for a measurement to be such an optimal measurement was discovered over thirty 
years ago by Holevo[42] and Yuen, Kennedy, and Lax[43j. 

Ip[21j was the first to consider the optimal measurement for the HSP. In particular he 
examined the optimal measurement for the HSP when all of the subgroups are given with equal 
a prior probability. Ip showed that in this case, for the Abelian HSP, the standard approach 
to solving the HSP is optimal. Further Ip showed that for the dihedral hidden subgroup 
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problem, the optimal measurement was not to perform a quantum Fourier transform over the 
dihedral group followed by a projective measurement. Continuing on in this line of inquiry, 
Bacon, Childs, and van Dam derived an exact expression for the optimal measurement for 
the dihedral hidden subgroup problempjj]. This measurement turned out to be the so-called 
pretty good measurement [44] . Further the optimal measurement on k copies of the hidden 
subgroup state was discovered to be a nontrivial measurement across multiple copies of the 
hidden subgroup states. Thus, even though measurement on a single register containing the 
hidden subgroup state is enough to information theoretically reconstruct the hidden subgroup 
state, a measurement across many registers containing the hidden subgroup is optimal for 
solving this problem. Unfortunately, it is not known how to efficiently implement the optimal 
measurement described in [19 . However, building upon the optimal measurement approach, 
Bacon, Childs, and van Dam then applied the apparatus of optimal measurements for the HSP 
to the HSP for certain semidirect product groups of the for x Z, for a fixed k and prime 
p[14j. Again it was discovered that the optimal measurement on multiple registers containing 
the hidden subgroup states required a measurement over multiple registers containing the 
hidden subgroup state (in fact over r registers.) However this time the authors were able 
to find an efficient quantum algorithm implementing this measurement. Thus a non-trivial 
quantum algorithm for a non-Abelian hidden subgroup problem was discovered which was 
optimally solved by a measurement across multiple copies of the hidden subgroup state. 

However, in spite of this success, there is much that remains mysterious about the efficient 
quantum algorithm for the Heisenberg HSP. In particular, why is there an efficient algorithm 
for implementing the optimal measurement in this case? Is there any structure behind mea- 
surements across multiple copies of hidden subgroup states which can be used to solve the 
hidden subgroup problem? In this paper we present partial answers to these questions and 
highlight the role of an important transform over many registers containing the hidden sub- 
group state, the Clebsch-Gordan transform, in providing an efficient algorithm. We believe 
that this is an important insight, first of all because it gives a new explanation for the efficient 
pretty good measurement based algorithm of Bacon, Childs, and van Dam. Further we be- 
lieve that our result highlights the important role of that Clebsch-Gordan transform can play 
in quantum algorithms. Clebsch-Gordan transforms, like quantum Fourier transforms over 
finite groups, suffer from there not being a canonical choice for the bases of registers output 
by these transforms. In this work we show that by a judicious choice of this arbitrary basis, 
we can use Clebsch-Gordan transforms to solve a non-Abelian HSP. Thus beyond showing 
that Clebsch-Gordan transforms can be useful for solving HSPs we can focus the search for 
efficient HSP algorithm to an even smaller problem of understanding the choose of basis for 
these transforms. 

3 The Hidden Subgroup Conjugacy Problem 

In this section we present a variant of the hidden subgroup problem which we label the hidden 
subgroup conjugacy problem. 

Two subgroups Hi C Q and H2 C G are said to be conjugate to each other if there exists 
an element of g £ Q such that 



H 1 = {gh 2 g- 1 ,Vh 2 en 2 }. 



(4) 
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The notion of conjugate subgroups forms an equivalence relationship. Therefore we can 
classify all subgroups into distinct sets of subgroups which are all conjugate to each other. 
The hidden subgroup conjugacy problem (HSCP) is exactly like the HSP, but instead of 
requiring that we correctly identify the hidden subgroup H of a function, we only require 
than one correctly identify which set of conjugate subgroups H belongs to. 

Clearly solving the HSP in its original form will allow one to solve the hidden subgroup 
conjugacy problem, but less is known about the reverse relation. First it is clear that when 
the group is Abelian or when the subgroups are normal, the HSP is equivalent to the HSCP 
(since subgroups of Abelian groups and normal subgroups are conjugate only to themselves.) 
Recently Fenner and Zhang 45 have examined the difference between the search and decision 
version of the HSP (in the search problem one is required to return the hidden subgroup 
and in the decision subgroup one is required to distinguish whether the hidden subgroup is 
trivial or not.) Their results imply that the HSCP and the HSP over permutation groups 
are polynomial time equivalent. Similarly they show that for the dihedral group, when the 
order of the group is the product of many small primes, then the HSCP and the HSP are 
polynomial time equivalent. In Scction[6]we will show that the HSCP and HSP are quantum 
polynomial time equivalent for the Heisenberg group. 

Finally we note that the HSP can be decomposed into the HSCP along with what we call 
the hidden conjugate subgroup problem (HCSP). In the hidden conjugate subgroup, one is 
given a function which hides one of a set of subgroups all of which are conjugate to each other 
and one desires to identify the conjugate subgroup. For the single copy HCSP, the pretty 
good measurement was shown to be optimal by Moore and Russell 2 2J. 

4 Symmetry Considerations and the HSP 

The hidden subgroup state of Eq. @ possess a set of symmetries which allow us to, with- 
out loss of generality, perform a change of basis which exploits these symmetries. These 
symmetries are related to the regular representations of the group. 

4-1 Regular Representations 

There are two regular representations of the group Q which we will be interested in, the left 
regular representation and the right regular representation. Both of these representations act 
on a Hilbert space with a basis labeled by the elements of the group Q. Define the left regular 
representation via its action on basis states of this Hilbert space, 

Rl{9)\9 , ) = \99'), (5) 

where ggi is the element of Q obtained by multiplying g and g' . Similarly, define the right 
regular representation via 

R R (g)\g') = \g'g- 1 )- (6) 

The regular representations are, in general, reducible representations of Q . In fact these repre- 
sentations are particularly important in the representation theory of finite groups. The reason 
for this is that the regular representations are reducible into a direct sum of all irreducible 
representations (irreps) of the group Q . Thus, it is possible to find a basis in which Rt, acts 
as 

RL(g) = @I d ,®D^g), (7) 
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where the direct sum is over all irreps of the group G, D^(g) is the pth irrep evaluated at 
group element g and is the dimension of the irrep p. A similar decomposition occurs for 
the right regular representation, 

^(5)=0^(3)®V (8) 

In fact, an elementary result of finite group representation theory tells us that the basis in 
which -Rl(s) acts as the above direct sum is also the basis in which Rn(g) acts as the above 
direct sum. In other words, in this basis, 

RL(g)R R (9')=R R (g')RL(g) = ®D fi (g')®Dt l ( g ). (9) 

Let us call the basis described above the \u, r^,!^ basis where — and = 

1, ■ ■ ■ ,<v 

4-2 Symmetry of Hidden Subgroup States 

Why are the left and right regular representations relevant to the hidden subgroup problem? 
Well it is easy to check that the hidden subgroup state pn, for all hidden subgroups Tt, are 
invariant under conjugation by the left regular representation, 

D L {g)pnD L {g- x ) = f>H, (10) 

for all g G Q. The reason for this is that left multiplication by a fixed group element acts 
as a permutation on left cosets. Notice that pu is not invariant under a similar transform 
using the right regular representation unless the representation being used is an element of 
the subgroup 7i. 

What is the consequence of the invariance of the pn with respect to the left regular 
representation? Schur's lemma[46 tells us that if an operator is invariant with respect to the 
operators enacting a representation of the group, then that operator has support only over the 
commutant of the this representation. For our purposes the commutant is simply the algebra 
of matrices which commute with the left regular representation, MD^{g) = D^(g)M. Since 
Ph is invariant with respect to the operators enacting the left regular representation of Q and 
the commutant of the left regular representation of Q is the right regular representation of Q, 
this means that in the r^,^) basis, pu can be expressed as 

PH = a M,H ® J d fl , (11) 

where cr^.n is an operator with support only on the space acted upon by the irreducible 
representation of the right regular representation. 

What does this mean for obtaining information about TL by making measurements on pu ? 
For now we focus on a single measurement on a single copy of pu . Recall that a generalized 
measurement is described by a set of positive operators {Pi, ...,Pk} which sum to identity 
2_, a _i P a = I- Outcomes of the measurement correspond to the indices, with the probability 
of getting outcome a when measuring state p given by p a = Tr [pP a ]- So if we make a 
measurement with operator P a on p-H the probability of getting outcome a is 



p a = Tr [pnP a ] 



(12) 
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But, since pn is invariant under the left regular representation operators, we can express this 
probability as 

1 



p a =Tr 



R L (g)p H R{(g)P a 



Tr 



PnPa 



where 



(13) 



(14) 



But P a is P a symmetrized over left regular representation of the group Q. This implies that 
P a commutes with the left regular representation, 



R L ( 9 y P a Rl(g') = P a , 



(15) 



for all g in Q. Thus using Schur's lemma, P a has support over only the commutant of the 
left regular representation, our good friend the right regular representation. In other words, 
in the \p, r M , l m u) basis, we find that 



]I d u 



(16) 



This means that given some measurement P a , the probabilities of the different outcomes a 
depends only on the symmetrized version of P a . Therefore without loss of generality we 
can deal with measurement which are already symmetrized and therefore have the above 
decomposition over the regular representation decomposition. 

As a final consequence of the symmetry of the pn , we recall that the algebra formed by 
a representation of a group (the group algebra) is a complete basis for operators which have 
support on the space the irreducible representations of the representation of the group act. 
For the right regular representation, where we have 



(17) 



then if we look at linear combinations of the operators Rn(g) for all g £ G, we find that these 
operators span the space of operators defined by 



(18) 



for all choices of M M . Because pu has support over the irreducible representations of the right 
regular representations of Q this means that 



Pn = ^2c g (H)R R (g). 

geg 



(19) 



Notice that the dependence of the subgroup Ti is only in the coefficients of the expansion. 

Furthermore we can directly evaluate these coefficients in the expansion over the right 
regular representation. Recall that for the right regular representation, 



Tr [R R (g)] = \g\5 g , e , 



(20) 
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where e is the identity element of the group. This implies 



Tr 



Rn(g)RW) = Tr [RRiWr'g)] = |0|<W- 



Hence we find that 



c g (U) = jg-Tr [pnRii(g)] 



(21) 
(22) 



Next we get tricky and note that 



Tr[p n R R (g)} = Tr 

\n 

\G\ 

where 



M J2 Wn)(g'H\R R (g) 

g'=coset rep. 

E (g'HWHg- 1 ), 

(j'^coset rep. 



l^-r 1 ) = -}= E y^ 1 ) 

v\ n \ hen 



\n\ 



E (9"H\R R {g)\g"H) 



g'—coset rep. 



But 



(g"H\g"Hg) = ± E (s'W^) = E (*iM = 4 



h 1 ,h 2 en 



\n\ 



where <5 S ^ is shorthand for 1 if g £ H and otherwise. Therefore 



1 



1 



In terms of pn this implies the neat little expression 

P n = i^T E 

' ' hen 



(23) 



(24) 



(25) 



(26) 



(27) 



For example, using the above expression, it is easy to check that p^ is a proportional to a 
projector, 



(28) 



Finally it is useful to write pn in r^, l^) basis 



11 Ziew 



(29) 



To recap this subsection, we have shown that the hidden subgroup state is invariant under 
conjugation by the left regular representation. This implies that the state is block diagonal 
in a basis where the right and left regular representations are fully reduced. Finally this leads 
to an expression for the hidden subgroup state in terms of the right regular representation, 
Eq. (|27p . which in turn leads to a simple block-diagonal expression for the hidden subgroup 
state, Eq. (29]). 
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4-3 The Quantum Fourier Transform over a Finite Group 

Having identified the symmetries of a hidden subgroup state pn and shown that this leads 
to pn being block diagonal in a particular basis, an important question is whether one can 
actually perform this basis change efficiently on a quantum computer. Indeed we haven't even 
identified what this change of basis is. In fact, the basis change is nothing more than the 
quantum fourier transform over the group Q . The quantum fourier transform (QFT) over the 
group Q is defined as the unitary transform 

= EE E M\i D MidM){9l (so) 

It is then easy to check, using the orthogonality relationships of irreducible representations 
that 

d^ du 

Qgr l ( 9 )qI = 0E>><i|® E i D ^,A9]\j)(f\ 

d^ Ay, 

QgR R (9)Q f g = E WjM3W\®T,m\- 

li j,j' = l i=l 

(31) 

Or in other words the QFT performs exactly the change of basis which block diagonalizes the 
left and right regular representations into a irreducible irreps as described in Eqs. |9|). 

When can the QFT over a group Q be enacted by a quantum circuit of size polynomial 
in log | Q |? While the full answer to this question is not known, for many groups, including 
the important symmetric group [33J and dihedral group (34J |47], efficient quantum circuits for 
the QFT are known. A quite general method for performing efficient QFTs over a large class 
of finite groups, including the Heisenbcrg group, has been derived by Moore, Rockmore, and 
Russell[48]. We refer the reader to the latter paper for more details on the quantum Fourier 
transform. 

Finally we should note that the QFT is a change of basis which is defined only up to the 
choice of the basis for the irreps. For our purposes, this basis choice will not matter, and 
we refer the reader to the paper of Moore, Rockmore, and Russellj48 for details on choices 
of this basis for different groups. 

4-4 The Symmetry Exploiting Protocol 

We have now seen that the QFT over the group Q is the transform which block diagonalizes all 
hidden subgroup states. By the symmetry argument above we can, without loss of generality, 
apply this transform. Further, since pu is an incoherent sum over the different irreps u, we 
can, without a loss of generality, perform this transform, and then measure the irrep index 
\p). Further, since pn acts trivially over the space where the left regular representation acts, 
the \l/j) index contains no information about the hidden subgroup and can also be measured 
(resulting in a uniformly random number between 1 and d^.) 

Hence we see that we can recast the single copy hidden subgroup problem as 

1. Perform a QFT on the hidden subgroup state. 
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2. Measure the irrep label fi and throw away the register where the left regular represen- 
tation irrep acts. The probability of obtaining irrep fi is given by 



^ = 11^)- ( 32 ) 



n 

where Xnid) — Tr[-D M (g)] is the character of the group element g in the irrep \x. 

3. One is then left with a state with support over only the space where the right regular 
representation irrep acts. This state is given by 

pM = Jf- E d m ( 33 ) 

\y\Pi* heH 



or, in other words the state 



Pnl H \ ~ 7T7T' V M > 



assuming that p M ^ 0. 



The above protocol has been designed based solely on the symmetry arguments of the hidden 
subgroup state. Notice that there are two locations already where information can appear 
about the hidden subgroup. The first is in the probabilities p^\H]. The second is in the state 

pM 

Finally note that if the hidden subgroup is the trivial group T = {e}, then we obtain the 
/ith irrep with probability 

PM = ^y. (35) 

Note as a sanity check that this is indeed a probability since the sum of the squares of the 
dimensions of all irreps is the order of the group. 

4-5 Multiple Copies of the Hidden Subgroup State 

As we have discussed in the introduction to the HSP, we are most interested in the setting 
where we use multiple copies of a hidden subgroup state to determine the hidden subgroup. 
In this setting, each of the hidden subgroup states will retain the symmetry we have described 
above. In other words our state is pf^ 1 and each of these can be reduced into irreducible irreps 
as described in Eq. (|29|) . In this case we immediately note that there is another symmetry 
of these multiple copies of the same state. This symmetry is a permutation symmetry. If 
we permute the different copies, pf^ m is invariant. In this paper we will not explore this 
symmetry, only noting that measuring the irrep label alone for the Schur transform cannot 
be used to solve either the HSP or the HSCP. For a negative result in using permutation 
symmetries in trying to solve the HSP, we point the reader to the work of Childs, Harrow, 
and Wocian[27], 
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5 Symmetry Considerations and the HSCP 

We have seen in the previous section that the symmetry of the hidden subgroup states means 
that these states have a structure related to the left and right regular representations of the 
group being considered. This led, in turn, to the idea that one should exploit this structure 
by performing a quantum Fourier transform over the group Q on the hidden subgroup states. 
In this section we will turn our attention to the hidden subgroup conjugacy problem and show 
how similar arguments lead one to a different transform than the QFT, the Clebsch-Gordan 
transform over the group Q. 

5.1 Single Copy Case 

Recall that in the HSCP we wish to determine which set of conjugate subgroups a hidden 
subgroup state belongs to. In particular we wish to design an algorithm which learns the 
set of conjugate subgroups hidden by /, but not the particular hidden subgroup. Stated in 
this manner, it is then natural to define the hidden subgroup conjugacy states which are an 
incoherent sum of all of the hidden subgroup states which belong to a given set of conjugate 
subgroups. Thus we can define the single copy hidden subgroup conjugacy state as 

Pl-H] = Tel J2 p 9-Hg-i, (36) 
11 see 

where g7ig~ l — {ghg^ 1 , h € 7i\. Notice that we have summed over the entire group here and 
not over simply the different conjugate subgroups. However, since every conjugate subgroup 
will appear an equal number of times in this sum, and we have normalized by the size of the 
group, our state is equivalent to a state which is one of the elements of the set of conjugate 
subgroups with equal probability. 

Using Eq. P7| it is easy to see that 

p g n g -i = ^7 E nniahg- 1 ) = 4 E RR^RRWRiiig- 1 ), (37) 
II hen ' I hen 

so that 

PM = ^|E Rr{9)PhRr{9~ 1 )- (38) 
11 see 

In other words, pp^ is pn symmetrized over the right regular representation. This implies 
that is invariant under the right regular representation: 

RR{g)p[n]RR{g^ 1 ) = p\h\- (39) 

Thus we can again apply Schur's lemma. Since pn already only has support over the right 
regular representation, we can deduce that in the \p 1 r^,l fl ) basis is given by 

Pin] =0c„(W)^®/<V (40) 

A" 

We can use the character projection operator, which projects onto a given irrep space, 

^ = SjE^(.9)^«(5), (41) 
11 see 
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where XjuG?) is the character of the pih irrep evaluated at group element g, along with our 
simple representation of the hidden subgroup states to determine c^(W), 

c„(W) = ^Tr[C, P[n] ] = T^rrY. ( 42 ) 

What does our expression for the hidden subgroup conjugacy state in Eq. [40] tell us? It 
tells us that, without loss of generality, if we are trying to solve the HSCP using a single copy 
of the hidden subgroup state, then we can without loss of generality perform a QFT over 
Q and then measuring the irrep label p. Further all of the information, if there is enough 
information to reconstruct which set of conjugate subgroups the hidden subgroup belongs to, 
can be derived from such a measurement. 

5.2 Multiple Copy Case 

Above we have argued that pn-n is the appropriate state to consider when attempting to 
describe algorithms for the HSCP when we have been given a single copy of the hidden 
subgroup state. What state should we consider for the multiple copy case? At first glance 
one is tempted to answer pf^- However, this is the state which is relevant if we are attempting 
to identify the which set of conjugate subgroups a hidden subgroup state belongs to, and we 
are given different hidden subgroup states from this set every time we produce a hidden 
subgroup state. This however, is not our case, as we are still querying a function which hides 
a fixed subgroup H. Thus the actual state which is relevant for the HSCP is instead 

11 geg 

The nice thing about Eq. (|4T{|) is that it represents a state which has been averaged over the 
m-fold direct product of the right regular representation. The m-fold direct product of right 
regular representations is the representation of Q given by Rn(g)® m , i.e. the tensor product 
of the right regular representation acting in the same manner on every tensor product space. 
Indeed we can express Eq. (|4"5|) as 

P[W],m = E Rd9r m pTRR(9-T m - (44) 

This implies, as before, that prw m is invariant under the m-fold direct product of the right 
regular representation, 

RR(gr m P[n],mRR(g-T m = Pm, m - (45) 

This is the symmetry which we are going to exploit to help us solve the multicopy HSCP. 

In order to exploit the symmetry in Eq. (|45p we begin by first rewriting pmy In particular 
we rewrite p[n\ in a basis in which every hidden subgroup state copy has been subject to a 
QFT over Q: 



11 geg i=i 



E D ^(9h l g- 1 )®I d 



hieH 



(46) 



16 How a Clebsch- Gordan Transform Helps to Solve 



Exchanging the product of sums with a sum of products we can express this as 



■ifc+i E ® 



g£Q in /t m >=1 



(47) 



From this expression we see that we should focus on terms for a fixed choice of single copy 
irrep labels, fii, . . . , /x TO . 



1 m 

11 gee i=l ftew 
which is invariant under the direct product action of the group, 



(48) 



M 



• A* Or 1 ) 



Li'=l 



= M. 



(49) 



Thus we see that the symmetry of Eq. (|4"5)) is going to be related to direct product represen- 
tation (g)™ 1 (g). 

What can we say about the direct product of m irreps represented by 0^ (<?)? Well 
fist we note that this is, of course, a representation of the group Q. As such it will be, in 
general, reducible. In other words, there exists a basis under which 



'A*(0)=0J« M ®D„(ff). 



(50) 



where n M is the multiplicity of the /xth irrep in this decomposition. We will call the transform 
which enacts the above basis change the m-fold Clebsch-Gordan transform. Notice that this 
transform can act in a non-separable manner over the different spaces where each irrep lives. 
It is this transform which we will use below to solve the Heisenberg hidden subgroup problem. 

Given the basis change described in Eq. (f5T)]) . and the fact that Rn(g)® m commutes with 
P[H],mi we can use Schur's lemma to show that pn-n tm h as a block diagonal form related to 
this basis change. In particular, the state p\7-n,m wn l ac t trivially on the space where the \x 
irrep acts in Eq. (|50j) and will only have non-trivial support over the space arising from the 
multiplicity of the /ith irrep, i.e. the space where identity acts in Eq. (fBT)]) . 

To be concrete let us define the m-fold Clebsch-Gordan transform. It is the transform 
which takes as input the m irrep labels ® ■ • • (£> |/i m ) along with the spaces upon which 



these irreps act \vi) ® • • • (8 |w« 
by Eq. ([50]). which is ® 



where Vi = 1, . . . , d^ H and transforms this into the basis given 
• ® |A*m) ® Im) ® \ w ) ® where /i is the irrep label for the 



subspaces on the RHS of Eq. (150)) , 



1. 



labels the multiplicity of these irreps, and 



v = 1, . . . , dp labels the space where the /nth irrep acts. Notice that we have not defined an 
explicit basis for \v) and \w), just as in the QFT over a finite group, there was a choice in the 
basis for the |r M ) and 1^) basis. When we encounter the Clebsch-Gordan transform relevant 
for the Heisenberg HSCP, we will pick a particular basis. 

Given the above definitions we can now describe the a protocol for distinguishing the 
hidden subgroup conjugacy states when we are given m copies of the hidden subgroup state 
just as we did for the hidden subgroup states: 
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1. Perform QFTs over Q over all m hidden subgroup states. 

2. Measure the irrep label for each of these m states, resulting in outcome /j.^. 

3. Throw away the registers where the left regular representation irreps act. 

4. Take the m remaining spaces where the right regular representation acts, along with 
the irrep labels, and perform a Clebsch-Gordan transform. 

5. Measure the irrep label after the Clebsch-Gordan transform, ji. 

6. Throw away the space where the irrep acts nontrivially in the Clebsch-Gordan transform, 
leaving only the space arising from the multiplicity of the /ith irrep. From this remaining 
state, a measurement should be performed which solves the hidden subgroup conjugacy 
problem, along with the classical data resulting from the irrep measurements, fi\, . . . , y, m 
and /Li. 

The above protocol can be used without a loss of computational power for distinguishing hid- 
den subgroup conjugacy states. Notice that the final step is a step which requires a judicious 
choice of measurement. Since the Clebsch-Gordan transform does not yield a canonical basis 
for the multiplicity space, this implies that all of the difficulty of distinguishing HSCP states 
lies in determining a basis for this measurement. Further, getting into this basis should be 
accomplished using an efficient quantum circuit. At this point one might wonder whether it 
is every possible to make such a judicious choice. It is precisely the goal of this paper to show 
that such a choice is possible and can lead to efficient quantum algorithms for the HSCP. 

6 The Heisenberg Group 

We now turn from our general discussion of the HSP and the HSCP for any finite group Q to 
a discussion where Q is a particular group, the Heisenberg group. In this section we collect 
much of the relevant information about this group, its subgroups, and its irreps. 

We are interested in the Heisenberg group 7i p = Z p x Z 2 where p is prime. This is the 
group of upper right triangular 3x3 matrices with multiplication and addition over the field 
F p . We denote elements of this group by a three-tuple of numbers, (x, y, z), with i,i/,ze Z p . 
The multiplication rule for this group is then given by 

(x,y,z)[x',y',z') = {x + x', y + y' + xz', z + z'). (51) 

The inverse of an element {x, y, z) of the Heisenberg group is the element {—x, —y + xz, —z). 

The representation theory and subgroup structure of the Heisenberg group is easily de- 
duced. We will use (up to a change in the way we write group elements) the notation from 
the paper of Radhakrishnan, Rotteler and Sen[41]. The Heisenberg group hasp 2 different one 
dimensional irreps and p — 1 different p dimensional irreps. The one dimensional irreps are 
given by 

XaA(x,y,z))=U aX+bZ : (52) 

where a, b € Z p and oj = exp I — ) . The p dimensional irreps are given by 



* k ((x,y,z))=u; k vJ2" kZr \ r + x )( r \> 



(53) 
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where {;£Z*. For future reference, the characters of the p dimensional irreps are 

Xk((x, y, z)) = 5 x , S zfi uj kv p. (54) 

The Heisenberg group has subgroups of four different orders, p 3 , p 2 , p, and 1. In Table[T]we 
catalog these subgroups and describe their generators. The first two groups in Table [T] are the 
self-explanatory group itself and the trivial subgroup. The M a groups are normal subgroups 
of Hp, M a < Tip. These groups are isomorphic to the Abelian group Z p x Z p . The Aij 
subgroups are Abelian subgroups which are not normal in TL p . These groups are subgroups 
of the appropriate Mi subgroups. In particular they are normal subgroups A a ,j < M a and 
■Aa.j ^ M a > if i 7^ Finally, C is the center of Tip. 



Table 1. Subgroups of the Heisenberg group, Hp. 



Subgroup 


Generators 


Label Range 


Order 


Hp 


(1,0, 0), (0,1,0), (0,0, 1) 




P 3 


T 


(0,0,0) 




1 


K 


(1,0, i), (0,1,0) 




p 2 


Moo 


(0,1,0), (0,0,1) 




P 2 






i,j e z p 


P 




(o,i,i) 




P 


C 


(0,1,0) 




P 



We are interested in solving the HSP for Ti p . A theorem from Bacon, Childs, and van 
Damrrj] (which is an extension of a theorem of Ettinger and Hoyer[3D]) shows that this 
problem can be reduced to the hidden subgroup problem when the subgroup being hidden is 
restricted to being either Aij, i,j € Z p or the trivial subgroup T. In fact we really only need 
to identify Aij, i,j € 1 V since if our algorithm returns a subgroup of this form, we can easily 
verify, by querying the function twice, whether it is constant on left cosets this subgroup. If 
the hidden subgroup were a trivial subgroup, we would find the function is not constant and 
would then return that the hidden subgroup is trivial. 

We are interested in the hidden subgroup conjugacy problem. Thus we would like to know 
which of the subgroups Aij are conjugate to each other. Conjugating a general element of 
Tip about a generator of Aij, we find that 

(x,y,z)(l,j,i)(x,y,z)~ 1 = (l,j + xi-z,i). (55) 

Thus we see that subgroups Aij and Ai t k f or a U i> k € Z p are conjugate to each other. Thus 
in the HSCP we are required to identify not i and j of Aij (and distinguish this from the 
trivial subgroup), but only to identify i. 

We are now in a position to show that solving the HSCP for the Heisenberg group can 
be used to solve the HSP for this group. Suppose that we have solved the HSCP for the 
Heisenberg group restricted to subgroups Aij and we identified i. We can identify j via the 
observation that Aij is normal in A/"j. In other words, if we now work with a HSP where our 
original / is restricted to the subgroup A/i (which we explicitly know, since we have identified 
i) then we can use the efficient quantum algorithm for finding normal subgroups[H| to find j. 
Alternatively (and equivalently, really) we could have simply noted that Mi is Abelian and 
thus we can run the standard HSP algorithm for Abelian groups over this to identify Aij. 
Thus we see that for the Heisenberg group, the HSP and the HSCP are actually quantum 
polynomial time equivalent to each other. 
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6.1 The Heisenberg Hidden Subgroup State 

The hidden subgroup state for the Heisenberg group can be readily calculated using the 
formalism described in the previous sections. We are particularly interested in a procedure 
where we perform a QFT over the Heisenberg group on the hidden subgroup state, and 
measure the irrep label, as prescribed in the protocol of Sec. 14.41 

We need to study the case that the hidden subgroup is one of the Aij subgroups. It is 
useful to note that this subgroup is the set Aij = {(I, 2~ 1 l(l — l)i + Ij, S Thus the 

probability of observing the one dimensional irrep with character \a,b is 

Pa.b = 4 E " al+m = \ 5 "M- (56) 
The probability of observing the p-dimensional irrep with character Xk is 

= -4 E 2 ~ ^ - + y» '*)) = -■ ( 57 ) 

1 iei, P 1 

Comparing this to the results from the trivial subgroup, we see that the trivial and the Aij 
subgroups cannot be distinguished by the above measurement of a. Indeed, the probability 
of getting one of the p dimensional irreps in both cases is uniformly ^ and there are p — 1 
such irreps such that with probability 1 — ^ the states are not distinguished using just this 
irrep measurement. 

We are interested in more than just the probability of the measurement of the irrep label. 
In particular we are most interested in the exact form of the hidden subgroup state produced 
after we measure the irrep index and throw away the index of the left regular representation. 
When the hidden subgroup is Ai.j and we measure the one dimensional irrep with character 
Xa,b we obtain, of course, a single one dimensional space with density matrix just the scalar 
1. However when obtain one of the p dimensional irreps, we obtain the state over the p 
dimensional irrep space, 

pk(Ai,j) =-J2 uT^-VW J2 " klir V + 0<r|- (58) 
P iez p rez p 

This latter state is the state which we will be most relevant to our efficient algorithm for the 
HSCP over the Heisenberg group. 

7 The Clebsch-Gordan Transform over the Heisenberg Group 

If we have two irreps of the Heisenberg group, and what are the rules for decomposing 
the direct product of these irreps into irreps? In other words, what is the Clebsch-Gordan 
transform for the 2-fold direct product of two irreps of the Heisenberg group? 

The first case to consider is when both of the irreps are one dimensional irreps with 
characters Xat.bx and Xa 2 ,b 2 - ^ n this case it is easy to see that the direct product of these 
irreps is a one dimensional irrep with corresponding character Xa 1 +a 2 .b 1 +b 2 where the addition 
is done over Z p . The second case to consider is when one of the irreps is the one dimensional 
irrep with character Xai,fei an d t ne second irrep is a p dimensional irrep with character x.k 2 - 
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In this case it is easy to see that 

Now making the change of basis described by the unitary matrix 



V=J2 \t + k 2 %)(t\ 



(60) 



to x ai M((x,y,z)) ®a k2 ((x,y,z)) yields 

Vuj k 2y +a ix +b 2 z cj k2Zr \r + x){r\V^ = a k {{x,y,z)). (61) 

Thus the direct product of the one dimensional irrep with character \a,b and the p dimensional 
irrcp a k is a p dimensional irrep a k . Further there is no multiplicity in this decomposition. 

The final case to consider is the case where one is forming the direct product of two p 
dimensional irreps, a kl and a k2 . ln this case we see that 

a kl ((x,y,z))®a k2 ((x,y,z))= ]T u^+^n+x)^ ]T u; k ^ +k ^\r 2 + x)(r 2 \. (62) 

Consider first the case where k\ + k 2 ^ mod p. Define the following change of basis 

W= Yl W-fyial^Kkm + kibjih + hy 1 )^]. (63) 

Applying this transform to a kl ((x, y, z)) ® a k2 {{x, y, z j) results in 

^ fe ' y+( ' £iri+ ' £2r2) 1r 1 -r 2 )(r 1 -r 2 |®|(fc 1 r 2 + fc 2 r 2 )(A : ')" 1 +a;)((fcir 2 + A :2 r 2 )(fc') _1 | (64) 

ri,r 2 GZp 

where k' — k\ + k 2 . Using u = r\ — r 2 and v = {k\r\ + fc 2 r 2 )(fc') _1 this can be reexpressed as 

u k ' v Y l«X«l® Y w k ' v "\v + x)(i>\ (65) 

which we see is just J® ((x, y, z)). Thus when ki+k 2 ^ mod p, the direct product of the 
two p dimensional irreps labeled by k\ and k 2 is reducible to the irrep labeled by k' = fci + k 2 
with multiplicity p. 

When k\ + k 2 = mod p we find that 

a kl ((x,y,z))®a k2 ((x,y,z))= £ w^'^-^ln +a:)<n| ® |r 2 +a:)<r 2 |. (66) 

ri,r 2 €Zp 

Consider the unitary change of basis 

X = -^i Y ^ {a+b)c \a-b)(a\(g>\c)(b\. (67) 
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This transforms the direct product to 

uj^ uz+2xc \u){u\® \c)(c\, (68) 

where u = n — r 2 and we have summed over v = n + r 2 . This we recognize as p 2 one 
dimensional irreps, with every such irrep appearing exactly once. 

Above we have derived how the direct product of two irreps of the Heisenberg group 
decomposes into new irreps. Can we efficiently enact a quantum algorithm to achieve this 
transformation? Certainly. In fact we have done most of the heavy lifting already in identify- 
ing the transforms V, W, and X. Recall the Clebsch-Gordan transform will act from a space 
with two irrep label registers, <g> \fJa), along with the space upon which these irreps act 
|t>i) ® \v 2 ) and have an output space where the two irrep labels, ® |/z 2 ) are kept around 
and the direct product irrep label \y) is produced along with the space where this irrep acts, 
\v) and the space of the multiplicity of this irrep, \w). 

The algorithm for efficiently enacting the Clebsch-Gordan then proceeds as follows. First, 
notice the transform above can all be done conditionally on the and I/X2) registers. In 
other words, given that we can efficiently enact the appropriate transform for fixed classical 
labels of and |/x 2 ), then we can efficiently implement the full Clebsch-Gordan transform 
by using the appropriate conditional gates. Thus we can divide up our algorithm into the 
cases we described above. 

1. [n\ and H2 are one dimensional irreps) In this case it is easy to efficiently classically 
compute the new irrep label from the old irrep labels, a\, b\ and a 2 , b 2 . Indeed the new 
label is simply a = ai + a 2 and b = b\ + b 2 done with addition modulo p. Further the 
spaces involved are all one dimensional, (|t>i) and \v 2 ), along with \v) £g> \w)) Thus no 
other work needs to be done for this portion of the Clebsch-Gordan transform. 

2. [iii and \i 2 are one and p dimensional irreps) In this case the new irrep label \i is nothing 
more than the original irrep label of the p dimensional irrep, so such a label should be 
copied (reversibly added) into this register. If we wish for the irreps to be expressed in 
the same basis that we express the <Jk irreps, then we will need to apply the V gate to 
the ® \v 2 ) register. It is easy to see that V can be enacted using classical reversible 
computation plus a diagonal phase gate which is easy to efficiently enact. 

3. = fci and fi 2 = k 2 are both p dimensional irreps, such that k\ + k 2 7^ mod p) In 
this case the new irrep label register will need to hold k\ + k 2 mod p which can easily 
be calculated using reversible classical circuits. In addition, the transform W must be 
enacted on the vector space \v\)®\v 2 ). W can also be enacted using classical reversible 
circuits efficiently. 

4. (/ii = k\ and [i 2 — k 2 are both p dimensional irreps, such that fci + k 2 = mod p) 
This is the only case where we cannot compute the new irrep label directly. Instead 
we must enact X, which can be done with a combination of classical reversible circuits 
and an efficient QFT (or approximation thereof) over Z p . Once this is done, the new 
irrep label can be found by simply transforming the vector basis labels \u) and |c) to 
the irrep label \a = 2m, b = kic). 
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Thus we have shown that the Clebsch-Gordan transform for the Heisenberg group can be 
implemented with an efficient quantum circuit. 

7.1 Clebsch-Gordan Transform Methods 

For completeness we would here like to discuss prior results for obtaining transforms very 
similar to Clebsch-Gordan transforms over finite groups, and why it is important to distinguish 
these methods from the method we have described above. The first such method was used 
by Kuperberg in his algorithm for the dihedral HSP 23 (where it is listed as Proposition 
9.1). The basic idea of Kuperberg's method is as follows. Suppose that we are working on 
the tensor product of two Hilbert spaces, each of which is spanned by a basis of the group 
elements {\g),g G Q}- Define the following unitary operator on this tensor product space: 



where a, b G Q. Then this operation takes left multiplication by the direct product of the 
group to left multiplication on the right Hilbert space. In other words, 



Kuperberg uses this observation to perform summand extraction. Summand extraction works 
by taking two spaces which carry irreducible representations of a group Q and then performing 
quantum Fourier transforms (and inverses) over Q along with Ui (we refer the reader to [23J for 
details.) The net effect of these transforms is to perform a partial Clebsch-Gordan transform. 
In particular whereas in a full Clebsch-Gordan transform, one has access to registers containing 
the total irrep label the space where the multiplicity acts \w), and the space where 
the total irrep acts \v) (see Section l5.2p . in using this method the multiplicity register is 
not directly accessible. In other words there is no canonical basis which could be used to 
reveal the information stored in the multiplicity register. Or, to put it differently, none of 
the algorithmic uses to which this method has been applied use the multiplicity register and 
therefore arbitrary basis for this information was defined. The method of summand extraction 
is also explored by Moore, Russell and Sniady[28j where again the multiplicity register is not 
used. 

Finally, a similar method for getting access to the irrep register and the space where 
the irrep acts for a Clebsch-Gordan transform is described in an early preprint version of 
[2"5] . as well as in the the thesis of Harrow[49 . This method uses a generalizes the quantum 
phase estimation algorithm to non-Abelian groups. For our purposes, just as in summand 
extraction, these circuits can be used to enact a Clebsch-Gordan transform in its entirety, 
but there has been no work describing how information in the multiplicity register can be 
accessed. 

We can now put our Clebsch-Gordan transform into perspective. While previous work 
has focused on the role of the irrep label register and the register where the representation 
lives, none has focused on the multiplicity space register. Our circuit for a Clebsch-Gordan 
transform picks out a particular basis for this multiplicity space, and, as we shall show in the 
next section, this will lead to an efficient algorithm for the Heisenberg HSCP. 



Ui(\a)®\b)) = (\b- 1 a)®\b)) 



(69) 



Ui[R L {g)9R L ig)]U} = I®R L (g). 



(70) 
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8 The Clebsch-Gordan Transform over the Heisenberg Group and Solving the 
Heisenberg HSCP 

We will now show that applying the Clebsch-Gordan transform over the Heisenberg group 
allows us, with a little bit more work, to solve the Heisenberg HSCP using two copies of the 
Heisenberg hidden subgroup state. 

Consider the general procedure described in Section 15.21 for two copies of the Heisenberg 
hidden subgroup state. This procedure begins by prepare two copies of the hidden subgroup 
states, perform a QFT over the Heisenberg group on these states, measuring the irrep index, 
and throwing away the registers where the left regular representation acts. With probability 
(p-i)(p-2) we w jjj obtain a label corresponding to the fcist irrep, a kl , in the first hidden 
subgroup and k 2 st irrep, au 2 , in the second hidden subgroup state with k\ and satisfying 
ki + k 2 =/= mod p. This probability is exponentially close to 1, so we can assume that we 
are exactly in this situation. Further we may assume that k\ and k 2 are given with uniform 
probability assuming that ki + k 2 0. In this case, the two registers where the right regular 
representation acts contains the state 

Pki(Ai,j) ® Pk 2 (-Ai,j)- (71) 

We will now apply the Clebsch-Gordan transform to this state. Given that we are dealing 
with two p dimensional irreps, with k\ + k 2 ^ mod p, this is equivalent to applying the W 
of Eq. (|63|) to the state and to adding the two irrep labels k\ and k 2 together to obtain the 
new irrep label, k' = k\ + k 2 ^ 0. Using Eq. ([58| we find that 



W{p kl {Ai,j) <8> Pk 2 {A,j))W^ 

_ J_ ijJ k 1 (2- 1 l 1 (l 1 ~l)i+l 1 r 1 i+l 1 k 1 j)+k 2 (2- 1 h(h-l)i+l 2 r2i+hk2j) (72) 

^ h,l 2 ,ri,r 2 £l, p 

Vi +I1-T2- h)(ri - r 2 \ ® {[k^n + h) + k 2 ( n + /i)]^') -1 ) ([^i + k 2 r 2 ]{k')- l \ 

Next, we measure the second of these registers since this register will contain no information 
about which conjugate subgroup the state belongs to. If we make this measurement, then we 
will obtain outcome \m) with probability p and the state remaining in the first register will 
be 

- u kl2 ~ ll *( 1+klk ^ i+klhiu \u + h(l + k2 1 k 1 )){u\, (73) 

P h ,u£Z p 

where we have used the fact that only on diagonal elements of the second register matter, 
so k\l\ 4- k 2 l 2 — mod p, and relabeled u = r x — r 2 . Further relabeling this sum by S\ = 
U + + fc^fci) and s 2 = u this becomes 

- y uj a ™ (si - S2) | Sl )(s 2 |. (74) 

At this point we can begin to see how to solve the Heisenberg HSCP by making a particular 
measurement on this state. In particular the above density matrix corresponds to the pure 
state 

_L u a ^ s \s). (75) 
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Suppose, now, that we had a transform U2 which acted upon an equal superposition of the 
two square roots (done modulo p) of a number in the computational basis, + I — V^)) 

and produced the square number \t), and if it acts on the state |0) it produces the state |0). 
Applying this transform to the our state results in 



E 



vE%ip\v is square^ 

It is convenient to rewrite this state as 



w + — 10) 



(76) 



5>°»- E u a » 

v£.1i v \v not square 



1 - V2 



10) 



(77) 



where a 



_ fci fc 2 



Now performing an inverse QFT over Z p results in the state 



V2 



E E 



1 - v/2 



P 



P 



E 



(78) 



v£l, p \v not square :c£Z p x£Z p 

If we now measure this state, then the probability that we obtain the outcome a is 



Pr{a) 



V2- £ 

vG1a p \v not square 



V2 1-V2 
p p 



1 ,-, 1 1 1 



= \ + 0(±) (79) 



Thus we see that with probability approximately i a measurement will result in the outcome 
\a). Since we know k\ and fe, we can easily invert a = i fc ^| and find i, the label of the 
hidden subgroup conjugacy. 

Thus, assuming that we can efficiently implement U2 we have shown how to efficiently 
solve the HSCP for the Heisenberg. How do we implement U2 efficiently? This can be done 
via an idea explained in the original Heisenberg hidden subgroup algorithm of Bacon, Childs, 
and van Dam[14 . In particular we note that there exists an efficient deterministic classical 
algorithm which can compute the two square roots of a number modulo p. In particular this 
algorithm can work with a control bit labeling which of the two square roots is returned: 
V^|a;)|6) = |(— l) b y/x)\b) where y/x is a canonical square root. Then consider running this 
algorithm backwards, with an input on the control bit being \b) = (|0) + |1)). After this 
operation, perform a Hadamard on the control qubit and measure this register. If the outcome 
is |0), the applied transform on the non-control register will take -^(\~Jx) + | — \fx)) to |x) as 
desired. This will occur with probability i. Thus we find that we can efficiently implement 
U% with probability | such that our full algorithm succeeds with probability j + O(p-). 

We have thus shown that the Clebsch-Gordan transform plus some quantum post process- 
ing can be used to efficiently solve the Heisenberg HSCP and hence solve the full Heisenberg 
HSP. 

8.1 Comparison to the PGM Heisenberg HSP Algorithm 

Above we have shown how to arrive at an efficient quantum algorithm for the Heisenberg HSP 
by focusing on the Heisenberg HSCP and using the extra symmetry of this state to motivate 
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the use of a Clebsch-Gordan transform to solve the problem. How does this compare with 
the algorithm derived by Bacon, Childs, and van Dam[14]? We will see below that we have, 
in effect, derived a portion of this algorithm. 

Here we will briefly recap the hidden subgroup algorithm of |14j for the Heisenberg group 
which was derived using the PGM formalism. The first step begins with the standard prepa- 
ration of the hidden subgroup state. One then performs a quantum Fourier transform over 
Zp on the registers corresponding to the y and z values of the group element (x,y,z), and 
measuring these registers, obtaining with uniform probability over Z p a value for y and z. 
After this one is left with the state, 

\i,j,y,z) = ]T (80) 

for random uniform y, z G Z p . When we have two copies of this state, we obtain four uniform 
random variables, yi, Zi,y 2 , z 2 € Z p along with the state 

\i,j,Vi,zi)®\i,j,V2,zn) = - Y w J ' (6iyi+62a2)+2 " li(bl(bl - 1)ai+b2(62 - 1)a2)+J ' (blZl+b2Z2) |6i,62) 

(81) 

If we rewrite this state in terms of the variables 
u = bxyi + b 2 y 2 

v = 2- 1 & 1 (6 1 -l)t/ 1 + 2-%(b 2 -l)y 2 + b 1 z 1 + b 2 z 2 (82) 
the two copy state can be expressed as 

- V u^ +vi \biM) (83) 
p L — ' 

One then notes that if one could enact a transformation which takes the an equal superposition 
of the two solutions to the quadratic equations defined in Eq. (|82|) to their respective values 
of u and v, then we could transform the above state into 

- £ oj^+ vi \u,v) (84) 

u^v^Jj v \u,v solve the quadratic equation 

from which a QFT over l? v will immediately reveal i and j with probability i (since only 
half of the values of u and v will arise in solving the quadratic equations.) Exactly such a 
transform which can take the superposition over two solutions to the u and v values which 
can be enacted using the same basic idea as that used to construct U 2 efficiently above, but 
instead of taking the two square roots to the square, a more complicated quadratic equation 
must be solved. We refer the reader to fH] for details of this construction. 

From the above description of the PGM derived quantum algorithm for the Heisenberg 
HSP we can use the insights we have gained in solving this using a Clebsch-Gordan transform 
to explain the structure of the above algorithm. First note that by performing a QFT over Z 2 
measuring the outcome and producing the state in Eq. (|80p we are, in effect, doing something 
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very near to that of the QFT over the Heisenberg group. Notice however that in the original 
PGM state, we keep around two indices y and z. However it is easy to see that if we average 
the pure states in Eq. (|80p over y, we obtain another pure state 



b(b-l)iy+bjy 



\b). 



(85) 



In other words the y register contains no information about the hidden subgroup. This is like 
the register containing the left regular representation not containing information about the 
hidden subgroup. Thus in the two copy state we could have equally well have dealt with the 
state 

1 u u j +^ hM) (86) 

n £• — * 



bi ,f)2GZ p 



where 



u = biy x + b 2 y 2 

w = 2- 1 6 1 (6 1 -l)y 1 + 2-^2(62 -1)2/2. 



(87) 



We see that y\ and y 2 serve as the k± and k 2 irreps labels (with an exception occurring when 

h = h = 0.) 

Next we note that, following our observation about how to perform the Clebsch-Gordan 
transform on the Heisenberg group, we can perform a basis change 

\s-t)(s\®\{sy 1 +ty 2 ){y 1 +y 2 )- 1 )(t\, 

assuming j/i + y 2 0. This transforms \i,j,yi)\i,j, 2/2) into 

- ]T Lu u i +wl \b 1 -b 2 ,(y 1 b 1 +y 2 b 2 )(y 1 



P 



2/2 J 



(89) 



6l,b2GZ p 



In the Clebsch-Gordan method we can measure the register of the irrep label. In the PGM case 
this corresponds to performing the above transform and then measuring the second register. 
Let this second register measurement outcome yield value m. This will produce the state 



<8> m) 



where r = b\ — b 2 and we can express w as 



2- 1 



2/12/2 



■r 2 + m 2 (yi + y 2 ) + 



.2/1 + 2/2 

which, factoring out the global phase dependent on m is 

1 \ ^ "1"2 ir 2 

> CJ^M+ra) r \ (g) m \ 



m 



(90) 



(91) 



(92) 
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Which we see is exactly the state we obtained after the Clebsch-Gordan transform, Eq. ([75]) . 
Thus we see that the effect of the Clebsch-Gordan transform is to transform the quadratic 
equation in Eq. (|82|l into a form in which the resulting quadratic equation contains only 
a quadratic term. So, in quite a real sense, our derivation of solving the HSCP using the 
Clebsch-Gordan transform leads directly to at least part of the measurement for the HSP 
used in the PGM approach. Thus it is best to view our Clebsch-Gordan derivation as giving a 
representation theoretic derivation of the PGM algorithm. Note however that it does not give 
quite the same derivation, since in the PGM based algorithm one obtains the full subgroup 
while in the Clebsch-Gordan based algorithm we only obtain which set of conjugate subgroups 
the hidden subgroup belongs to, using the hidden subgroup algorithm for normal subgroups 
to completely identify the hidden subgroup. 

9 Conclusion 

By focusing on the HSCP instead of the HSP, we have been able to apply symmetry arguments 
to multicopy algorithms which do not hold for the HSP. These symmetry arguments were 
exploited by performing a Clebsch-Gordan transform over the Heisenberg group and then 
applying an appropriate post processing measurement on the multiplicity register output of 
this transform. The algorithm we describe bears a great deal in common with the algorithm 
of Bacon, Childs, and van Dam|14j. However, we believe that an important insight into 
why the algorithm of Bacon, Childs, and van Dam works has been discovered. In particular, 
instead of relying on the optimal measurement criteria, we instead see that focusing on the 
symmetry of the multicopy HSCP leads to a change of basis which great facilitates solving 
the Heisenberg HSCP. In a real sense this implies that the Clebsch-Gordan transform over 
the Heisenberg group naturally arises for our problem. We believe that this is a new insight 
whose significance bears further investigation for other non-Abelian HSPs. 

At this point it is useful to draw an analogy with a previous stage in quantum algorithms 
research. For a long time it was known that a quantum Fourier transform could be used on 
hidden subgroup states without destroying any of their coherence. However quantum Fourier 
transforms do not have a canonical basis choice for their registers and thus the question in- 
vestigated by researchers was whether a good choice of basis exists for solving the hidden 
subgroup problem. The Clebsch-Gordan transform similarly does not have a canonical basis 
choice for the multiplicity register. We have shown, however, that for the case of the Heisen- 
berg group, a particular choice of basis, can be used to eventually solve the hidden subgroup 
problem. The work performed on choosing a proper basis for the quantum Fourier transform 
led to the result of Hallgren et aZ[2Q] that multi-register measurements are needed to solve 
the HSP. We are hopeful that understanding the proper basis choice for the multiplicity space 
register of the Clebsch-Gordan transform will not yield such negative results and this work 
represent evidence in favor of this view. 

Numerous obvious open problems arise from the above investigations. An immediate 
question is for what other groups can Clebsch-Gordan transforms be used to efficiently solve 
the HSCP or HSP? Another important open issue is over what groups can the Clebsch-Gordan 
transform be efficiently enacted in such a way as there is some natural basis choice for the 
multiplicity space register. In this regard, the subgroup adapted basis techniques of Bacon, 
Harrow, and Chuang 25, 26J along with those of Moore, Rockmore, and Russell [12], should 
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be of great help. Finally, an interesting question is whether the HSP and HSCP are (classical 
or quantum) polynomial time equivalent to each other. While this is known to be true for 
certain finite groups, the general case remains open. Of particular significance is this question 
for the dihedral groups when the group order is not smooth. 
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